75afef89a79d5775e53f6cdb9060ac27839aab0c9b0db1ea26996465fc364eb8

Sharing

Copy URL Twitter E-mail

General

Target

75afef89a79d5775e53f6cdb9060ac27839aab0c9b0db1ea26996465fc364eb8
Size

132KB
MD5

0576e45a28314868d84d78a144e5d030
SHA1

7129f2d497a0c142347e90a45cb03106ed4a6cc2
SHA256

75afef89a79d5775e53f6cdb9060ac27839aab0c9b0db1ea26996465fc364eb8
SHA512

315a13dd15d97ec3beafc6acf6258389e079a1f3995c782d6a8fa55ce556677106e90427865cc23e01d801bbc69c68d116e4ac1959630d036f64759dba59839c
SSDEEP

3072:wUjuRG5V2TIp4dHK+zhqGIiHUQR9UbZwalwMZbXfAPM:bDoqjeHhUzXYU

Score

N/A

Malware Config

Signatures

Files

75afef89a79d5775e53f6cdb9060ac27839aab0c9b0db1ea26996465fc364eb8
.dll regsvr32 windows x86

8ebc56de07c3a9e545cbbac0a14a0e3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
CloseHandle
GetLastError
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
ResumeThread
CreateThread
WaitForSingleObject
CopyFileA
DeleteFileA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetEndOfFile
SetConsoleCtrlHandler
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LeaveCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
UnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetProcAddress
RtlUnwind
FatalAppExitA
IsBadWritePtr
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
WideCharToMultiByte
DisableThreadLibraryCalls
GetModuleFileNameA
OutputDebugStringA
MultiByteToWideChar
GetCurrentThreadId
lstrlenW
LCMapStringA
Sleep
InterlockedExchange
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetLocaleInfoW

user32

SetWindowsHookExA
GetClassNameA
PostMessageA
CallNextHookEx
UnhookWindowsHookEx
GetWindowLongA

oleaut32

SysStringLen
LoadRegTypeLi
SysAllocStringLen
VariantCopy
VariantChangeType
VariantClear
SysFreeString
SysAllocString

ws2_32

inet_addr
htonl
gethostbyname
getpeername
getsockname
inet_ntoa
closesocket
shutdown
listen
bind
setsockopt
socket
accept
select
connect
ioctlsocket
__WSAFDIsSet
send
recv
recvfrom
sendto
htons

atl

ord16
ord30
ord58
ord32
ord57
ord18
ord15
ord21
ord23
ord31

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ebc56de07c3a9e545cbbac0a14a0e3b

Headers

File Characteristics

Imports

kernel32

user32

oleaut32

ws2_32

atl

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 4KB